In order to access an object, the program must have a special token (like a car key) that designates the object and gives the program the authority to perform a specific set of actions (such as reading or writing) on that object. This token is known as a capability. (2UTU)